This Privacy Policy sets out the principles on the privacy of users and the protection of their personal data in connection with the website operated by OPUS KİMYA A.Ş. (the "Company"; operating under the INEA brand), located at Esentepe Mah. Ali Kaya Sk. No:1/B Polat Plaza B Blok K:11, 34394 Şişli / Istanbul / Türkiye, acting as data controller. This policy should be read together with the Privacy Notice; in the event of any discrepancy between this policy and the Privacy Notice, the Privacy Notice prevails.

1. Personal Data Collected

The following personal data may be collected in connection with the use of the website:

●        Identity Data: First name and last name (and national ID or tax ID number where required for invoicing)

●        Contact Data: E-mail address, phone number, address details

●        Financial Data: Payment and invoice details (card details are processed by the payment institution and are not stored on the Company's systems)

●        Customer Transaction Data: Order, request, complaint and transaction details

●        Processing Security Data: IP address, cookie ID, log records, device and browser information, site usage data, and interaction data obtained through hCaptcha, which we use to protect our forms against bots and abuse

●        Marketing and Advertising Data (only where you have given explicit consent): Your e-mail address, phone number and address transmitted to advertising platforms in hashed form, and ad interaction and conversion (purchase) data

The Company does not process any special categories of personal data belonging to you.

This data may be provided directly by the user or obtained automatically through cookies or similar technologies while the website is used.

2. Purposes of Use

The personal data collected is processed for the following purposes:

●        Carrying out order and sales processes

●        Carrying out payment and invoicing transactions

●        Managing delivery, logistics and return processes

●        Providing customer support services

●        Improving service quality and user experience

●        Collecting post-order customer satisfaction reviews

●        Protecting the website and forms against bots and abuse, and ensuring information security

●        Fulfilling legal obligations

In addition, marketing activities, the sending of commercial electronic messages, targeted advertising and the measurement of advertising performance (conversion tracking) are carried out only where you have given explicit consent.

Your data is processed on the following legal bases: the establishment or performance of a contract for order and delivery processes; legal obligation for financial and legal records; the legitimate interests of the data controller for site security and measuring service quality; and explicit consent for marketing and advertising activities. A breakdown of the legal bases by purpose is set out in the Privacy Notice.

 

3. Transfer of Personal Data

Your personal data may be transferred to administrative and official authorities, independent auditors, tax advisers and other external professional advisers, transport companies, auditing and consulting firms, organisations with which we have agreements for sending commercial electronic messages, programme partner organisations, suppliers, financial institutions, similar business partners, and domestic third-party service providers, limited and proportionate to the purposes stated above and in accordance with Article 8 of the Law on the Protection of Personal Data ("the Law").

4. Transfer of Personal Data Abroad

Under Article 9 of the Law, your personal data may be transferred abroad in the following order of priority: (i) where the Personal Data Protection Board has issued an adequacy decision regarding the country, sector or international organisation to which the transfer will be made; (ii) in the absence of an adequacy decision, where a Standard Contract approved by the Board has been signed or other appropriate safeguards have been provided; (iii) in limited cases where these safeguards cannot be provided, with your explicit consent given after you have been informed of the possible risks of the transfer.

Data obtained through the analytics and marketing tools used on our website (Google Analytics, Meta Pixel, etc.) may be transferred abroad because the servers of these service providers are located abroad.

In addition, hCaptcha is used to secure our forms; Shopify for our e-commerce infrastructure; and Google (e.g. Analytics, Ads, Customer Reviews) and Meta services for measurement, advertising and customer reviews. Where you have given explicit consent, your e-mail address, phone number and address may be transmitted in hashed form to Google and Meta and used to measure advertising performance and to create custom audience lists. You may withdraw the explicit consent you have given in this context at any time by applying to kvkk@opus.com.tr.

Detailed information on the processing under the "Shopify Network Intelligence" feature of our e-commerce infrastructure provider Shopify is set out in the Privacy Notice.

5. Payment Security

Payment transactions are carried out through a payment infrastructure provider (PayTR) that complies with international security standards. Credit card and payment details are not stored on the systems of OPUS KİMYA A.Ş. Our website is protected by an SSL security certificate.

6. Third-Party Service Providers

In order to provide our services, we work with:

●        Cargo and logistics companies

●        Payment institutions

●        E-commerce infrastructure, technical infrastructure and hosting providers (including Shopify)

●        Return management system providers

●        Form and site security service providers (including hCaptcha)

●        Analytics, advertising and performance measurement service providers (including Google and Meta)

●        Business partners providing electronic message delivery services

These organisations may process data only to the extent required by the service.

7. Data Security

OPUS KİMYA A.Ş. takes the necessary technical and administrative security measures to protect personal data against unauthorised access, loss, alteration or disclosure. Where personal data is obtained by others through unlawful means, this is notified to the data subject and to the Personal Data Protection Board as soon as possible, in accordance with Article 12 of the Law.

8. User Rights and Applications

Under Article 11 of the Law, users have the right to: learn whether their personal data is being processed; request information if it has been processed; learn the purpose of processing and whether it is used in accordance with that purpose; know the third parties, in Türkiye or abroad, to whom their data is transferred; request the rectification of incomplete or inaccurate data; request the erasure or destruction of their data; request that these operations be notified to the third parties to whom their data has been transferred; object to a result to their detriment arising from the exclusively automated analysis of their data; and claim compensation for damages arising from the unlawful processing of their data.

Applications relating to these rights may be submitted to kvkk@opus.com.tr. The application methods (in writing, through a notary, via registered electronic mail, from a registered e-mail address, and with a secure electronic signature) are set out in the Privacy Notice. Applications are concluded as soon as possible depending on the nature of the request and within 30 days at the latest, free of charge. KVKK applications submitted to customer service (contact@inealife.com) are forwarded to the responsible unit.

9. Retention Periods

Your personal data is retained for the period required by the purpose of processing and the periods prescribed by applicable legislation:

●        Invoice, accounting and tax records: 10 years

●        Order and customer transaction data: 3 years

●        Communication, marketing and ad measurement data: Until withdrawal of explicit consent or 3 years at most

●        Cookie and site usage data: Varies depending on the type of cookie and is specified in our Cookie Policy

When the retention period expires, personal data is deleted, destroyed or anonymised.

10. Cookies and Similar Technologies

Our website uses analytics and marketing cookies in addition to essential cookies. Cookies other than essential cookies are used only with your explicit consent. You may withdraw your consent at any time through the cookie preferences panel or by applying to kvkk@opus.com.tr. The cookies used, their purposes and retention periods are set out in our Cookie Policy.

11. Changes to This Policy

OPUS KİMYA A.Ş. reserves the right to amend this Privacy Policy. The current text enters into force on the date it is published on the website.

For detailed information on the processing of your personal data, please see the Privacy Notice.